That's unrelated to google domains, though. Your client's domain ended up on a list distributed by Google Safe Browsing.
I'm talking about google domains itself, at the DNS level, will hijack your ENTIRE example.com domain and redirect to a safe browsing page.
I suppose in the end any domain provider could do the same.